By definition we have to:
The email policy of a company is one that describes employees and users how to use electronic communication tools correctly. In these policies it is established what it is acceptable and what it is not acceptable.
Two examples of these policies are:
1) Do not open or download files of emails that are not the official of the company because they can be fraudulent emails.
2) Do not open any link where you are asked for personal information from an email that is not the official of the company, because you may be the victim of theft in your personal data.